repository icon
apache / airflow Project repository

Apache Airflow - A platform to programmatically author, schedule, and monitor workflows

Submit a report

FIRST INTERACTION

WITHIN25 DAYS

REVIEW

WITHIN36 DAYS

FIX

WITHIN97 DAYS

Missing per-DAG Authorization Filter on Asset Listing Endpoint Leaks Unauthorize...
eedndee
self closed
Stored XSS in DAG ID Field leading to Full Administrative Account Takeover
adithyanjkr
self closed
Unauthenticated RCE via Hardcoded Default SECRET_KEY and Insecure Pickle Deseria...
adithyanjkr
self closed
Regression in Airflow 3.x task-sdk: isinstance guard prevents mask_secret() from...
winstoncrooker
pending
SecretsMasker bypass via var.json Jinja accessor allows Viewer role to read secr...
winstoncrooker
pending
Missing per-DAG Authorization Filter on Asset Events Endpoint Allows Cross-DAG I...
eedndee
self closed
Arbitrary File Read and Data Exfiltration in Tableau, Trino, and SMTP Hooks via...
haroon0x
pending
Critical SQL Injection (Multi-Statement) in Teradata Hook via `query_band` Param...
haroon0x
pending
Remote Code Execution (RCE) in Oracle Provider via Unsanitized `thick_mode_lib_d...
haroon0x
pending
Critical Broken Object Level Authorization (BOLA) in Airflow 3 Execution API - U...
haroon0x
pending
Authorization Bypass and Cross-Tenant Information Disclosure in FastAPI Log Serv...
haroon0x
pending
Missing Frozen Attribute in DAG Task SDK leading to Unauthorized Arbitrary File...
joel-66
pending
Fail-Open Plaintext Secret Storage When Fernet Key Is Unconfigured (_NullFernet)
christauff
pending
Mass Assignment in DAG Deserialization leading to Arbitrary File Read
joel-66
pending
Viewer reads secrets from rendered task fields
unclej4ck
pending
Shell Injection in SSHRemoteJobOperator POSIX Commands via Unsanitized Template...
davidaroca27
pending
SQL Injection in Apache Airflow Database Cleanup Utility via Unsanitized Table N...
lindseynguyen
pending
Remote Code Execution via unsafe exec()
lindseynguyen
pending
Arbitrary Class Import via Deadline Custom Reference Deserialization
ryanhugh-security-fanpierlabs
pending
Jinja2 Template Injection in Log Filename Rendering via DAG Run Metadata
ryanhugh-security-fanpierlabs
pending
Unrestricted import_string in BaseSerialization.deserialize Bypasses Allow-List
ryanhugh-security-fanpierlabs
pending
Execution API Missing Per-DAG Authorization on DAG Run Trigger and Clear Endpoin...
davidaroca27
pending
Path Traversal via External Object Names in S3 sync_to_local_dir and SFTP retrie...
davidaroca27
pending
Execution API Missing Per-Task Authorization for Connections/Variables/XComs All...
souta40524052
pending
Command Injection in PsrpOperator via unsanitized PowerShell here-string interpo...
cyberwael
pending
Arbitrary Code Execution (Worker Sandbox Escape) via Unvalidated classpath In...
starrohan-dotcom
pending
pache Airflow 3.x Execution API: `has_connection_access`, `has_variable_access`,...
cyberboar84
pending
Airflow 3.x Execution API authorization stubs always return True — any task JWT...
projectworks007
self closed
Viewer Role Authorization Bypass in Edge Worker UI Allows Unauthorized Worker St...
yangy-xiao
self closed
Authorization Bypass on Single Event Log Endpoint Allows Cross-DAG Audit Log Dis...
yangy-xiao
self closed
CVE-2025-30473 Patch Bypass — partition_clause SQLi via UNION SELECT (semicolon-...
mscgo
pending
InProcessExecutionAPI Bypasses All Authentication for DAG Parsing
realnits
pending
_pre_import_airflow_modules() Executes importlib.import_module() in the DagProce...
realnits
pending
Placeholder Authorization Stubs Allow Any Task to Access All Connections, Variab...
realnits
pending
Arbitrary Class Instantiation via import_string() in BaseSerialization.deseriali...
realnits
pending
SQL Injection via XCom-templated fields in HiveStatsCollectionOperator
kaushalvsheth
pending
Arbitrary File Read
joelindra
pending
JWT Bearer Token Logged in Plaintext on Authentication Failure in Execution API
nhomyk
pending
Fail-Open Authorization in Execution API — Unimplemented Access Control Returns...
nhomyk
pending
World-writable directories (0o777) created by default in SFTP hook
nhomyk
pending
Predictable password and token generation using insecure random.choices() instea...
nhomyk
pending
Authentication bypass via JWT signature verification disabled by default in Azur...
nhomyk
pending
SQL Injection in HiveStatsCollectionOperator via template_fields (table, partiti...
mscgo
pending
SQL Injection via Unsanitized Template Fields in Common SQL Operators and Amazon...
dimpyj1604
pending
RCE via default pickle serializer in PythonOperator task result deserialization
nhomyk
pending
Execution API Connection Endpoint Returns Plaintext Passwords Without Redaction...
pelegs202-design
pending
Execution API Placeholder Authorization Allows Any Task to Access All Connection...
pelegs202-design
pending
JWT Authorization Bypass via lstrip() Misuse in Log Server Enables Unauthorized...
pelegs202-design
pending
RCE via dill.loads() on attacker-controlled CLI arg in mlengine_prediction_summa...
theoddesseyp-ai
pending
Execution API authorization bypass via stub has_*_access() functions that always...
eistee82
self closed
Authenticated OS command injection via XCom race condition in example_xcom on ap...
kimkou2024
pending
Execution API allows any task to access all connection credentials via placehold...
narrator3333-hash
pending
SQL Injection via Unparameterized Query Construction in Teradata, Hive, MySQL, a...
elucidator-hky
pending
Missing Object Authorization in Execution API Connections Endpoint Exposes Conne...
gdattacker-researcher
self closed
Arbitrary Code Execution via dill.loads() Deserialization of User-Controlled Com...
elucidator-hky
self closed
SQL Injection via `destination_project_dataset_table` template_field in GCSToBig...
mscgo
pending
LDAP Filter Injection via HTTP Basic Auth Username in FAB Security Manager `_sea...
mscgo
pending
SQL Injection via `table`/`schema` template_fields in S3ToRedshiftOperator and R...
mscgo
pending
Execution API authorization bypass allows cross-task access to Connections, Vari...
gdattacker-researcher
self closed
LDAP Injection in Apache Airflow FAB Security Manager allows user enumeration, b...
richorama
self closed
Unsafe deserialization via pickle in Apache Airflow XCom and serialization
etwithin
pending
Command Injection on Target SSH Hosts via Flawed Path Validation in SSHRemoteJob...
ahmetartuc
self closed
Execution API Missing Authorization Allows Arbitrary Secret Extraction via Conne...
sendorrr
informative
High
JWT signature verification bypass in FAB Authentik OAuth flow allows authenticat...
jeremysommerfeld8910-cpu
self closed
Relaxed Jinja2 sandbox allows private attribute access; NativeEnvironment has no...
jeremysommerfeld8910-cpu
self closed
Arbitrary code execution via dill.loads() of user-controlled input in mlengine_p...
jeremysommerfeld8910-cpu
pending
Execution API access checks are TODO placeholders that always return True — secr...
jeremysommerfeld8910-cpu
pending
SimpleAuthManager generates passwords with non-cryptographic random.choices() en...
jeremysommerfeld8910-cpu
self closed
SQL Injection in Apache Airflow Oracle Provider
alrightryanx
self closed
Arbitrary DDL Execution in Teradata DdlOperator via Unvalidated ddl Template Fie...
1135
pending
SOQL Injection via f-string in Salesforce Provider — Unrestricted Data Exfiltrat...
1135
pending
Incomplete Shell Escaping in SSHRemoteJobOperator — Only Single Quotes Escaped,...
1135
pending
Arbitrary Command Execution via transform_script in GCSFileTransformOperator — l...
1135
pending
Remote Command Injection via tdload_options in Teradata TPT Provider — shlex.spl...
1135
pending
Remote Code Execution via Insecure Deserialization (dill.loads) in Google MLEngi...
1135
pending
SQL Injection in Teradata Compute Cluster Operators via String Concatenation
1135
pending
Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RB...
34selen
pending
SQL Injection in Apache Hive Provider via Unsanitized hiveconfs Parameter
johan-opperman
informative
Critical
Missing Authorization on Event Log Read
odgrso
informative
High
RCE via Deserialization of `next_kwargs` / `trigger_kwargs` in the Task Executio...
odgrso
pending
Command Injection in BTEQ Local Execution via Unsanitized Connection Parameters
johan-opperman
pending
Command Injection in Teradata TPT Provider via Unsanitized remote_working_dir Pa...
johan-opperman
informative
Critical
Execution API HITL IDOR (Missing Authorization on `task_instance_id`)
odgrso
informative
High
Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata in Airflow
34selen
pending
Command Injection in Apache Airflow Teradata BTEQ Hook
l3ster1337
self closed
Remote Code Execution via Unsafe Deserialization in apache-airflow-providers-htt...
ahmetartuc
self closed
Arbitrary File Read via Log Symlink following in FileTaskHandler
bademeischta
Medium
•$100
Viewer Role Authorization Bypass in Edge Worker UI Allows Unauthorized Worker St...
34selen
informative
High
Authorization Bypass in Public Backfills API Enables Cross-DAG Data Exposure
34selen
informative
Medium
Airflow externalLogUrl Permission Bypass
34selen
Medium
•$100
Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE vi...
skypher
Low
•$15
Command Injection in apache-airflow-providers-teradata leading to RCE via Bteq...
skypher
informative
Critical
Command Injection in example_xcom.py via XCom race condition
vincent550102
High
•$600
Path Traversal in DAG Load in Apache Airflow
lau90eth
informative
Critical
Admin Account Auto-Created Without Authentication via standalone Mode in Apache...
darkeeeandme
not applicable
Unauthenticated Access to Task Secrets via XCom Execution API in Apache Airflow
darkeeeandme
spam
Unauthenticated Access to Secret Variables via FastAPI Execution API in Apache A...
darkeeeandme
spam
Arbitrary file write during tarfile extraction using /airflow/providers/docker/o...
rook1337
self closed
Apache airflow metastore browser plugin sql injection vulnerability
laoquanshi
informative
High
Apache Airflow 2.7.1 SSRF Vulnerability Disclosure Report
doubledee07
informative
High
Cross Site Scripting
ghost
not applicable